$ rpki-client -vvf rpki.apnic.net/member_repository/A91C08EE/53C678D6430011ED840B3357C4F9AE02/FYuWZk-xya7us9KHB_h3_iN7Atw.mft File: FYuWZk-xya7us9KHB_h3_iN7Atw.mft (raw, json) Hash identifier: g23/WbvMoyw5jh4lMlznx2Ab5OweRN90zk4oKqwE2IE= Subject key identifier: DB:B0:37:AD:B0:42:FA:3D:FC:83:88:D2:54:1F:E0:AA:AD:C0:EF:9A Authority key identifier: 15:8B:96:66:4F:B1:C9:AE:EE:B3:D2:87:07:F8:77:FE:23:7B:02:DC Certificate issuer: /CN=A91C08EE/serialNumber=158B96664FB1C9AEEEB3D28707F877FE237B02DC Certificate serial: 0209 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FYuWZk-xya7us9KHB_h3_iN7Atw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C08EE/53C678D6430011ED840B3357C4F9AE02/FYuWZk-xya7us9KHB_h3_iN7Atw.mft Manifest number: 01F6 Signing time: Fri 25 Apr 2025 01:52:48 +0000 Manifest this update: Fri 25 Apr 2025 01:52:48 +0000 Manifest next update: Fri 02 May 2025 01:52:48 +0000 Files and hashes: 1: FYuWZk-xya7us9KHB_h3_iN7Atw.crl (hash: 16b0V/xN5Ab661MboufRP6f3w5kkRmk2JJRWAopq7Tg=) 2: 59A2E9D8A01411EF8E674221C4F9AE02.roa (hash: Awesdi3w1tMsyunxz0+auFNmXjcMcElIgsBpVsZJdUI=) 3: 378FB0D25B9211EEB8E7453DC4F9AE02.roa (hash: XHpwnOzWirhZDyC+O+dd8moXeBpb4e61IwD/RSr7i40=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C08EE/53C678D6430011ED840B3357C4F9AE02/FYuWZk-xya7us9KHB_h3_iN7Atw.crl rsync://rpki.apnic.net/member_repository/A91C08EE/53C678D6430011ED840B3357C4F9AE02/FYuWZk-xya7us9KHB_h3_iN7Atw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FYuWZk-xya7us9KHB_h3_iN7Atw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:52:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 521 (0x209) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C08EE, serialNumber=158B96664FB1C9AEEEB3D28707F877FE237B02DC Validity Not Before: Apr 25 01:52:48 2025 GMT Not After : May 2 01:52:48 2025 GMT Subject: CN=680aeaf0-fa3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:ec:55:72:07:02:a2:95:fa:23:77:28:c4:d6: f4:80:b6:a8:34:5c:ef:49:86:45:99:74:00:4f:3a: 06:ab:9f:cf:5c:c0:cf:3b:35:38:4a:0a:f6:1a:54: 86:f2:e4:e4:a8:a7:4e:50:55:f6:0a:de:bf:74:14: 1f:83:89:18:c9:ce:06:a1:60:43:c9:26:11:c3:3e: 3a:1a:1a:af:64:67:1a:2c:3b:97:6e:b6:5f:57:e0: e3:9c:01:17:c1:5b:de:2a:3d:9e:a0:83:b5:8d:45: d0:ab:f7:b2:bb:8f:8d:d5:79:b9:61:6f:ca:71:a7: 8d:d0:be:02:45:db:ba:50:43:cf:64:d5:44:f6:2c: d3:1a:38:8e:5b:1b:fb:5d:16:28:c3:b9:f1:fa:d8: 4a:4a:f9:e5:84:90:c8:0f:aa:70:59:c3:b9:30:32: cb:e2:05:df:fe:bd:af:46:92:e6:d9:52:4c:23:b0: b4:1e:02:e9:36:7b:ec:8a:01:dd:f4:19:3a:f0:c4: d6:7e:96:b0:91:fc:a0:58:7c:20:14:81:ff:57:e9: d0:dd:fd:04:76:f0:78:bd:9c:03:e6:0a:8a:4c:28: 11:50:96:79:37:57:33:ab:df:87:d2:11:6e:1d:ca: 6d:19:b1:e6:3c:8a:a5:fa:1e:5b:35:8a:03:96:91: 93:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:B0:37:AD:B0:42:FA:3D:FC:83:88:D2:54:1F:E0:AA:AD:C0:EF:9A X509v3 Authority Key Identifier: keyid:15:8B:96:66:4F:B1:C9:AE:EE:B3:D2:87:07:F8:77:FE:23:7B:02:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C08EE/53C678D6430011ED840B3357C4F9AE02/FYuWZk-xya7us9KHB_h3_iN7Atw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FYuWZk-xya7us9KHB_h3_iN7Atw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C08EE/53C678D6430011ED840B3357C4F9AE02/FYuWZk-xya7us9KHB_h3_iN7Atw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:0d:ba:5c:9d:2c:89:2d:ff:35:f6:85:8a:c5:d9:10:b0:9a: 5c:7c:ac:f3:9e:3e:63:51:9c:c5:dc:a0:c5:1c:df:18:b2:b9: 53:ab:a5:8e:13:57:ac:32:ef:08:43:2e:f3:ec:c4:8e:c8:02: d7:1e:67:4a:0b:d2:f5:76:fc:c2:fb:7f:fc:fd:bf:e0:c4:d9: 60:e7:58:02:18:0d:fe:e3:8b:70:9e:5c:21:d4:2c:a7:6c:39: 6b:60:fc:c7:34:01:8d:75:8a:5e:e0:fc:65:f4:38:fe:af:c5: d5:e3:18:d6:0a:e3:81:1a:1d:34:f6:44:64:23:c4:84:73:82: 82:d8:06:97:ae:dc:26:4d:a6:68:a1:b6:e0:e6:50:48:e3:8d: 48:28:0b:c4:03:7e:c0:37:b0:3d:e9:25:50:8e:f0:87:3f:64: 8e:0e:8c:15:99:47:dc:d3:75:09:9e:f0:9a:72:15:e0:67:d3: 13:da:b8:73:db:e1:8b:32:2f:dd:3b:ad:9b:bc:26:10:ba:9d: c6:cf:26:40:c1:32:cb:e9:29:44:4a:25:15:ff:3c:7f:b2:a0: 15:d7:eb:c7:82:04:66:34:85:f8:2c:4a:bb:d9:58:7e:55:ca: 60:48:8b:29:5e:9b:8e:f8:4e:76:26:a7:de:b0:58:e2:bf:62: 96:66:38:7a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzA4RUUxMTAvBgNVBAUTKDE1OEI5NjY2NEZCMUM5QUVFRUIzRDI4NzA3Rjg3N0ZF MjM3QjAyREMwHhcNMjUwNDI1MDE1MjQ4WhcNMjUwNTAyMDE1MjQ4WjAYMRYwFAYD VQQDEw02ODBhZWFmMC1mYTNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyOxVcgcCopX6I3coxNb0gLaoNFzvSYZFmXQATzoGq5/PXMDPOzU4Sgr2GlSG 8uTkqKdOUFX2Ct6/dBQfg4kYyc4GoWBDySYRwz46GhqvZGcaLDuXbrZfV+DjnAEX wVveKj2eoIO1jUXQq/eyu4+N1Xm5YW/KcaeN0L4CRdu6UEPPZNVE9izTGjiOWxv7 XRYow7nx+thKSvnlhJDID6pwWcO5MDLL4gXf/r2vRpLm2VJMI7C0HgLpNnvsigHd 9Bk68MTWfpawkfygWHwgFIH/V+nQ3f0EdvB4vZwD5gqKTCgRUJZ5N1czq9+H0hFu HcptGbHmPIql+h5bNYoDlpGTyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNuwN62w Qvo9/IOI0lQf4KqtwO+aMB8GA1UdIwQYMBaAFBWLlmZPscmu7rPShwf4d/4jewLc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMDhFRS81M0M2NzhENjQz MDAxMUVEODQwQjMzNTdDNEY5QUUwMi9GWXVXWmsteHlhN3VzOUtIQl9oM19pTjdB dHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZZdVdaay14eWE3dXM5S0hCX2gzX2lON0F0dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MDhFRS81M0M2NzhENjQzMDAxMUVEODQwQjMzNTdDNEY5QUUwMi9GWXVXWmsteHlh N3VzOUtIQl9oM19pTjdBdHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCaDbpcnSyJLf819oWKxdkQsJpcfKzznj5jUZzF3KDFHN8YsrlTq6WO E1esMu8IQy7z7MSOyALXHmdKC9L1dvzC+3/8/b/gxNlg51gCGA3+44twnlwh1Cyn bDlrYPzHNAGNdYpe4Pxl9Dj+r8XV4xjWCuOBGh009kRkI8SEc4KC2AaXrtwmTaZo obbg5lBI441IKAvEA37AN7A96SVQjvCHP2SODowVmUfc03UJnvCachXgZ9MT2rhz 2+GLMi/dO62bvCYQup3GzyZAwTLL6SlESiUV/zx/sqAV1+vHggRmNIX4LEq72Vh+ VcpgSIspXpuO+E52JqfesFjiv2KWZjh6 -----END CERTIFICATE-----Generated at Sat Apr 26 04:21:58 2025 by rpki-client